Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/1c85b798-66e9-3480-8b9c-a501a28e5733.roa
File: 1c85b798-66e9-3480-8b9c-a501a28e5733.roa (raw, json)
Hash identifier: hktjnNqG0JsaA+21y8iZqHtjPt0i5pLMmQdCJ0luHiA=
Subject key identifier: E9:B3:74:91:F1:B8:C2:B5:3C:E7:23:7E:32:08:3F:64:35:82:3E:EC
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583F337E0EE542D669AE9414BCC0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/1c85b798-66e9-3480-8b9c-a501a28e5733.roa
Signing time: Fri 09 Sep 2022 12:00:00 +0000
ROA not before: Fri 09 Sep 2022 12:00:00 +0000
ROA not after: Sat 15 Oct 2022 04:00:00 +0000
asID: 16509
IP address blocks: 18.160.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:33:7e:0e:e5:42:d6:69:ae:94:14:bc:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Sep 9 12:00:00 2022 GMT
Not After : Oct 15 04:00:00 2022 GMT
Subject: CN=af2f15b8-060f-4be3-8a6c-d6963a9aca81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:85:42:6a:5f:45:2d:23:ed:1e:54:28:9d:5a:
26:31:98:06:c7:18:ae:2b:13:e1:26:ba:c6:9c:b5:
90:53:b6:4d:7b:3f:06:ae:37:d3:ca:2d:d8:7b:44:
12:96:7b:9c:10:4c:a0:b9:29:1b:bd:3c:ac:a2:5c:
03:d2:c4:68:4f:48:6c:62:2e:e8:59:a2:e5:34:a5:
ed:61:ed:db:97:94:8e:8c:72:fa:11:b3:b8:7d:c7:
da:81:7f:33:dd:95:7a:f3:ed:d3:20:0e:01:a6:9b:
4a:5d:a4:5e:da:3f:e5:69:da:97:35:29:5a:77:4b:
42:c6:81:bf:96:3a:68:51:ba:97:f4:90:8d:79:8a:
9a:4e:4f:89:95:18:27:25:8b:01:e6:52:03:f7:89:
5c:65:d4:eb:53:b8:d4:d5:c2:39:ce:57:c5:52:f5:
c8:f0:42:ce:01:bf:54:76:8a:f1:54:9a:4d:4a:a0:
dc:33:b1:d7:60:00:fa:a9:75:60:e2:6c:93:39:de:
e9:76:8c:0b:9e:ff:b3:28:6d:0d:50:c3:c4:c7:1d:
0d:13:97:58:a9:2b:a6:f8:36:f3:ed:5a:bc:6d:68:
da:60:84:ce:68:22:2f:10:be:e2:84:0e:4f:ad:14:
45:0a:02:fb:02:10:67:a8:ec:30:50:7b:62:0f:3e:
ca:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:B3:74:91:F1:B8:C2:B5:3C:E7:23:7E:32:08:3F:64:35:82:3E:EC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/1c85b798-66e9-3480-8b9c-a501a28e5733.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.160.0.0/15
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
04:eb:f9:09:6d:3e:eb:b9:ea:06:38:fc:33:6b:69:f4:a6:9e:
1c:17:b9:e4:aa:97:26:2b:e2:d6:c6:69:2e:29:89:4d:90:79:
92:26:af:e3:ae:6d:4d:67:4d:98:14:47:46:9e:4c:f3:a8:a0:
ec:6c:cb:0e:36:93:ce:2d:ef:cf:fd:b7:51:32:99:2c:3e:53:
02:fb:d9:6e:20:cb:73:cd:58:be:fe:26:24:a9:e1:8c:12:eb:
77:ba:33:5a:6e:26:e9:44:5f:37:48:62:b2:68:83:36:d4:31:
23:4b:a1:4c:3a:e4:72:8c:01:55:e6:d8:c5:6d:17:0b:88:27:
10:81:5d:37:64:dc:fa:55:e0:88:ba:95:4c:df:2f:48:7f:9c:
23:6d:8b:53:92:4b:6a:27:3b:83:a8:58:f8:66:04:00:4c:0f:
d4:d5:08:5f:6b:50:2a:d4:a0:5f:5b:04:a0:2c:23:b9:b2:4f:
74:d0:06:6f:ed:8d:b8:6b:3d:f9:42:74:a3:24:74:fb:cc:3c:
a2:ab:ff:75:12:ce:b2:98:06:9b:6b:1a:2c:cf:1d:da:60:ab:
15:d7:f5:37:58:9d:e2:48:97:0d:5a:82:d4:3b:23:79:e7:0c:
c5:47:ee:62:1b:b3:e2:e7:2f:11:51:b7:c4:e2:c9:51:5c:54:
c9:3c:d0:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:49:58 2025 by rpki-client